Check: APPL-14-002250
Apple macOS 14 (Sonoma) STIG:
APPL-14-002250
(in versions v1 r2 through v1 r1)
Title
The macOS system must disable Remote Management. (Cat II impact)
Discussion
Remote Management must be disabled.
Check Content
Verify the macOS system is configured to disable Remote Management with the following command: /usr/libexec/mdmclient QuerySecurityInfo | /usr/bin/grep -c "RemoteDesktopEnabled = 0" If the result is not "1", this is a finding.
Fix Text
Configure the macOS system to disable Remote Management with the following commands: /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -deactivate -stop
Additional Identifiers
Rule ID: SV-259533r941221_rule
Vulnerability ID: V-259533
Group Title: SRG-OS-000095-GPOS-00049
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000381 |
The organization configures the information system to provide only essential capabilities. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| CM-7 |
Least Functionality |